registry / mt-tech / 1.0.10

mt-tech@1.0.10

美团技术服务合作中心通用cli

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Running the CLI loads an opaque bundled interceptor. It can alter outbound requests and attach request signatures derived from device-fingerprint material.

Static reason

One or more suspicious static signals were detected.

Trigger

The user runs the mt-tech command.

Impact

Network destinations contacted by the CLI may receive added identifying or signing data; opaque code prevents a narrow verification of what is collected.

Mechanism

Bundled HTTP interception and device fingerprint signing.

AI rationale

The package ships and automatically loads an opaque global request interceptor with device-fingerprint behavior. This is a concrete, unresolved privacy and request-integrity risk, but it is user-invoked rather than an install-time attack.

Evidence

bin/run.jsnode_modules/@sec/cliguard/package.jsonnode_modules/@sec/cliguard/index.js

Network endpoints2

mcp.sjst.st.sankuai.commcp-open-cater.test.meituan.com

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The CLI automatically imports a bundled opaque @sec/cliguard dependency before command execution.
The bundled dependency declares that it intercepts all HTTP requests and maintains a device-fingerprint reporting daemon.
The published entry point and command implementations are heavily obfuscated.
The manifest bundles @sec/cliguard, so this behavior is shipped with the package.

Evidence against

There is no preinstall, install, or postinstall hook; prepare only invokes a build command.
The behavior is activated when the user runs the mt-tech CLI, not merely by installing it.
The package commands target named Meituan/Sankuai service endpoints.

Behavioral surface

Source

Network

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 5 file(s), 25.0 KB of source, external domains: mcp-open-cater.test.meituan.com, mcp.sjst.st.sankuai.com

Source & flagged code

4 flagged

node_modules/@sec/cliguard/index.jsView file

Lines 1-2javascript

1#!/usr/bin/env node

2'use strict';const a0_0x11efc4=a0_0x4101;(function(_0x591981,_0x3efe69){const _0xb13700=a0_0x4101,_0x55b286=_0x591981();while(!![]){try{const _0x4d9799=parseInt(_0xb13700(0x137))/0x1*(-parseInt(_0xb13700(0x148))/0x2)+parseInt(_0xb13700(0x18d))/0x3+-parseInt(_0xb13700(0x149))/0x4+-parseInt(_0xb13700(0x196))/0x5+parseInt(_0xb13700(0x165))/0x6*(parseInt(_0xb13700(0x1a5))/0x7)+parseInt(_0xb13700(0x161))/0x8*(-parseInt(_0xb13700(0x1a4))/0x9)+parseInt(_0xb13700(0x17f))/0xa*(parseInt(_0xb13700(0x151))/0xb);if(_0x4d9799===_0x3efe69)break;else _0x55b286['push'](_0x55b286['shift']());}catch(_0x97dd3a){_ ...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/@sec/cliguard/index.jsView on unpkg · L1

Long lines were clipped for display.

dist/index.jsView file

Lines 1-1javascript

1(function(_0x512f97,_0x2e0058){var _0x4b2b81=_0x5367,_0x4b03ee=_0x512f97();while(!![]){try{var _0x476742=-parseInt(_0x4b2b81(0x10a))

bin/dev.cmdView file

•path = bin/dev.cmd kind = build_helper sizeBytes = 86 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/dev.cmdView on unpkg

dist/commands/api.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/api.js#virtual:normalized:round1View on unpkg

Source & flagged code

4 flagged · loading source

node_modules/@sec/cliguard/index.jsView file

1#!/usr/bin/env node L2: 'use strict';const a0_0x11efc4=a0_0x4101;(function(_0x591981,_0x3efe69){const _0xb13700=a0_0x4101,_0x55b286=_0x591981();while(!![]){try{const _0x4d9799=parseInt(_0xb13700(0x137))/0...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

node_modules/@sec/cliguard/index.jsView on unpkg · L1

dist/index.jsView file

1(function(_0x512f97,_0x2e0058){var _0x4b2b81=_0x5367,_0x4b03ee=_0x512f97();while(!![]){try{var _0x476742=-parseInt(_0x4b2b81(0x10a))/0x1*(parseInt(_0x4b2b81(0x10e))/0x2)+parseInt(_...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

bin/dev.cmdView file

Findings

3 High3 Medium6 Low

HighObfuscated Payload Loaderdist/index.js

HighObfuscated

HighSemantic Analysis Limiteddist/commands/api.js#virtual:normalized:round1

MediumNetwork

MediumShips Build Helperbin/dev.cmd

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptonode_modules/@sec/cliguard/index.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to mt-tech@1.0.10.

See version security history for other recorded verdicts.

Review the evidence and your use of mt-tech@1.0.10 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 11:44:47.213Z (UTC).